1615 matches found
Microsoft Internet Explorer 'deflate' HTTP Content Encoding Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...
Quiksoft EasyMail 6.0.3.0 imap connect() ActiveX BOF Exploit
Exploit for windows platform in category remote exploits ============================================================ Quiksoft EasyMail 6.0.3.0 imap connect ActiveX BOF Exploit ============================================================ !-- I - TITLE Security advisory: Quiksoft EasyMail 6.0.3.0...
FreeBSD ftpd setusercontext()远程权限提升漏洞
BUGTRAQ ID: 36119 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD及其他一些BSD系统有一个用于设置用户上下文的功能，如FreeBSD中的setusercontext函数： setusercontextlc, pw, uidt0, LOGINSETLOGIN|LOGINSETGROUP|LOGINSETPRIORITY| LOGINSETRESOURCES|LOGINSETUMASK; 其中的LOGINSETRESOURCES设置允许用户设置资源。根据用户手册所述： LOGINSETRESOURCES...
Microsoft PowerPoint Notes Container Heap Memory Corruption Remote Code Execution Vulnerability
Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious PowerPoint file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...
Microsoft DirectX DirectShow MJPEG Video Decompression Remote Code Execution Vulnerability
Description Microsoft DirectX is prone to a remote code-execution vulnerability because the DirectShow component fails to properly handle compressed media files. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application...
Microsoft Excel未明远程代码执行漏洞
BUGTRAQ ID: 33870 CNCAN ID：CNCAN-2009022404 Microsoft Excel是一款微软开发的电子表格处理程序。 Microsoft Excel存在未明问题，远程攻击者可以利用漏洞以运行此程序的用户上下文执行任意指令。 目前没有详细漏洞细节提供。Symantec报告此漏洞，目前检测名为'Trojan.Mdropper.AC'。 Microsoft Excel 2007 SP1 Microsoft Excel 2007 厂商解决方案 目前没有解决方案提供： http://office.microsoft.com/excel...
Wesnoth 1.x - PythonAI Remote Code Execution
source: https://www.securityfocus.com/bid/33971/info Wesnoth is prone to a remote code-execution vulnerability caused by a design error. Attackers can exploit this issue to execute arbitrary Python code in the context of the user running the vulnerable application. Versions prior to Wesnoth 1.5.1...
Microsoft Windows Media Player 91011 - .WAV File Parsing Code Execution
Microsoft Windows Media Player 91011 - .WAV File Parsing Code Execution // source: https://www.securityfocus.com/bid/33042/info Microsoft Windows Media Player is prone to a code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into opening a malicious...
Microsoft Word RTF '\do' 图形对象的远程堆内存溢出漏洞(MS08-072)
Microsoft Word is prone to a remote heap memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious RTF file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in user...
Microsoft Internet Explorer Deleted Object Access Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...
CVE-2008-4996
init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor disputes this vulnerability, stating that "init is used in a single-user context; there's no possibility that this is exploitable...
Design/Logic Flaw
init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor disputes this vulnerability, stating that "init is used in a single-user context; there's no possibility that this is exploitable...
Apple QuickTime Panorama PDAT Atom Parsing Buffer Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the handling of...
Microsoft PowerPoint Picture Index Remote Code Execution Vulnerability
Description Microsoft PowerPoint is prone to a remote code-execution vulnerability due to an integer-overflow error. An attacker could exploit this issue by enticing a victim to open a malicious PowerPoint file. Successfully exploiting this issue would allow the attacker to execute arbitrary code...
Microsoft Office Malformed BMP Filter Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious BMP file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in...
Microsoft Office Malformed EPS Filter Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious EPS Encapsulated PostScript file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of t...
Microsoft Visio Object Header Remote Code Execution Vulnerability
Description Microsoft Visio is prone to a remote code-execution vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts will result in a...
Microsoft Office 200020032004XP - File Memory Corruption
Microsoft Office 200020032004XP - File Memory Corruption source: https://www.securityfocus.com/bid/28146/info Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Office file. Successfully exploiting...
Microsoft Publisher Memory Index Code Execution Vulnerability
Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Publisher file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...
Sun Java Runtime Environment 1.4.2 - Font Parsing Privilege Escalation
source: https://www.securityfocus.com/bid/25340/info The Sun Java Runtime Environment is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the user who invoked the Java applet. Successfully exploiting this issu...